Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: bhK1+OsAlQB6bwqi0cf4ye8cp84+kAau3jKSD3UONU4=
Subject key identifier: 3E:DF:2C:09:AE:4C:E5:24:8D:75:6E:62:BE:FE:92:26:03:6D:0B:FA
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 0194BD858ECB72387C90FFBCD798A294C1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0628
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: /bwKmB9dyfNIttK5gQ/kml9Rl7JXD501HaXGIhZ/p1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8e:cb:72:38:7c:90:ff:bc:d7:98:a2:94:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=3edf2c09ae4ce5248d756e62befe9226036d0bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:61:25:7f:46:68:e4:94:1b:f1:8c:2c:64:
d4:9b:3c:53:be:60:f7:63:99:ee:81:e5:92:3b:ad:
c2:7d:8a:db:e9:1c:41:d8:85:55:fa:67:36:fe:04:
95:34:dd:ea:8f:31:65:e9:9a:09:3e:b5:92:65:7f:
eb:a1:7f:c7:38:4b:7f:c9:ba:e3:77:05:1a:5f:a6:
e0:6b:83:8c:37:25:cb:62:9c:53:b5:ff:a3:d1:c9:
88:0f:4f:ce:f7:f2:14:4a:63:f2:24:6e:31:a7:d2:
cc:08:74:b4:d7:d8:55:b0:b5:6a:a2:15:18:50:92:
bd:76:85:83:43:35:8e:3b:c7:3f:82:0e:f2:87:21:
b5:22:f0:86:80:2b:3f:ff:65:62:ff:a5:e6:7e:78:
05:1e:78:17:e1:2b:d8:36:b4:e4:ff:05:92:03:c7:
21:31:2d:0f:ca:c4:85:88:a5:9d:e0:78:ac:37:9c:
f1:8a:f9:42:96:2a:5c:db:e2:4a:55:26:7a:59:f7:
54:98:a8:95:00:e6:64:23:11:67:72:82:17:08:54:
75:fc:1e:88:0c:32:a2:3c:42:1e:5c:ca:d7:ef:a5:
aa:d0:8f:3a:1b:00:22:1e:d2:40:c5:3f:e7:b1:72:
d9:b1:73:0a:81:e3:34:13:ec:8e:27:22:70:75:3a:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:2C:09:AE:4C:E5:24:8D:75:6E:62:BE:FE:92:26:03:6D:0B:FA
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9e:e1:41:a2:a0:f2:7c:b7:76:1b:4e:6f:8a:6f:1a:ad:52:
6e:cb:7c:39:69:74:2b:29:af:eb:e7:cf:b5:e2:08:8b:e8:82:
db:bb:6a:09:c2:0b:c9:20:d4:aa:d1:2a:86:78:2e:b0:9c:d1:
4c:08:48:ae:df:90:5e:04:8a:c9:89:35:4e:b2:41:81:34:81:
a5:9d:39:4e:5a:c7:c1:07:e2:8c:e2:a1:07:97:11:f6:5e:0f:
54:d4:e4:b5:08:91:c7:bc:29:2a:a7:e1:32:52:58:e2:02:e4:
d2:d9:e6:e5:8c:73:fd:50:f5:8b:07:8a:f5:ea:4b:57:07:f6:
7b:09:0c:21:4a:84:8d:d5:df:08:e0:dc:71:3d:54:db:f0:49:
39:fb:76:f3:bb:b9:6e:6a:c0:76:6b:60:73:65:02:e3:2c:ea:
3f:65:97:e4:6a:fb:fe:a2:70:48:33:3c:12:ca:5b:fe:f4:16:
aa:4b:ba:bd:40:f0:81:71:44:51:87:45:0d:be:10:ab:b1:9a:
6b:4a:c7:f6:78:46:ee:90:72:d8:be:34:a4:eb:37:80:3c:d2:
a2:a2:d6:de:ae:da:58:98:37:ba:0e:28:fb:13:10:f7:34:0c:
6c:bf:ba:eb:2b:83:3d:aa:05:20:b9:86:30:4d:8f:6d:6e:61:
d7:04:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:58 2025 by rpki-client